From: Vladimír Čunát <vladimir.cunat@nic.cz>
Date: Fri, 7 Jul 2017 13:14:05 +0000 (+0200)
Subject: NEWS, docs: update dns64 info
X-Git-Tag: v1.3.2~12^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=df52a6632dd52eebf112ab29df5d076690d44d8b;p=thirdparty%2Fknot-resolver.git

NEWS, docs: update dns64 info
---

diff --git a/NEWS b/NEWS
index 6358eb466..03bd455aa 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,7 @@ Bugfixes
 --------
 - daemon: check existence of config file even if rundir isn't specified
 - policy.FORWARD and STUB: use RTT tracking to choose servers (#125, #208)
+- dns64: fix CNAME problems (#203)  It still won't work with query policies.
 
 Improvements
 ------------
diff --git a/modules/dns64/README.rst b/modules/dns64/README.rst
index 30b434bb1..4eccc99c0 100644
--- a/modules/dns64/README.rst
+++ b/modules/dns64/README.rst
@@ -5,6 +5,8 @@ DNS64
 
 The module for :rfc:`6147` DNS64 AAAA-from-A record synthesis, it is used to enable client-server communication between an IPv6-only client and an IPv4-only server. See the well written `introduction`_ in the PowerDNS documentation.
 
+.. warning:: The module currently won't work well with query policies.
+
 .. tip:: The A record sub-requests will be DNSSEC secured, but the synthetic AAAA records can't be. Make sure the last mile between stub and resolver is secure to avoid spoofing.
 
 Example configuration
@@ -18,5 +20,6 @@ Example configuration
 	dns64.config('fe80::21b:aabb:0:0')
 
 
+
 .. _RPZ: https://dnsrpz.info/
-.. _introduction: https://doc.powerdns.com/md/recursor/dns64
\ No newline at end of file
+.. _introduction: https://doc.powerdns.com/md/recursor/dns64